QUESTION: 37

Kevin, a professional hacker, wants to penetrate CyberTech Inc’s network. He employed a technique, using which he encoded packets with Unicode characters. The company’s IDS cannot recognize the packets, but the target web server can decode them.

What is the technique used by Kevin to evade the IDS system?

Session splicing
Urgency flag
Obfuscating
Desynchronization

Answer(s): C

Reveal Solution Next Question

QUESTION: 38

Suppose that you test an application for the SQL injection vulnerability. You know that the backend database is based on Microsoft SQL Server. In the login/password form, you enter the following credentials:

Based on the above credentials, which of the following SQL commands are you expecting to be executed by the server, if there is indeed an SQL injection vulnerability?

select * from Users where UserName = ‘attack’ ’ or 1=1 -- and UserPassword = ‘123456’
select * from Users where UserName = ‘attack’ or 1=1 -- and UserPassword = ‘123456’
select * from Users where UserName = ‘attack or 1=1 -- and UserPassword = ‘123456’
select * from Users where UserName = ‘attack’ or 1=1 --’ and UserPassword = ‘123456’

Answer(s): A

Reveal Solution Next Question

QUESTION: 39

Which of the following commands checks for valid users on an SMTP server?

RCPT
CHK
VRFY
EXPN

Answer(s): C

Reveal Solution Next Question

QUESTION: 40

Bella, a security professional working at an IT firm, finds that a security breach has occurred while transferring important files. Sensitive data, employee usernames, and passwords are shared in plaintext, paving the way for hackers to perform successful session hijacking. To address this situation, Bella implemented a protocol that sends data using encryption and digital certificates.

Which of the following protocols is used by Bella?

FTPS
FTP
HTTPS
IP

Answer(s): A

Reveal Solution Next Question

Free 312-50v13 Exam Braindumps (page: 35)

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

312-50v13 Exam Discussions & Posts